Privacy Policy

1. Introduction

GarudAgniAI.com ("we", "us", "our") operates the interviewai.coach platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Data: Name, email address, password hash, and authentication tokens when you register.
• Profile Data: Professional field, specialization, target role, seniority level, and preferred language.
• Resume Data: Uploaded resume files for interview personalization (stored encrypted at rest).
• Interview Data: Audio recordings, transcriptions, and AI-generated evaluations from mock and live interviews.
• Payment Data: Billing information processed by our third-party payment processors (we do not store full card numbers).
• Communications: Support tickets, feedback, and any messages you send us.

2.2 Information Collected Automatically

• Device & Browser Data: IP address, browser type, operating system, device identifiers.
• Usage Data: Pages visited, features used, session duration, click patterns, and performance metrics.
• Cookies & Tracking: Essential, analytics, and marketing cookies (see our Cookie Policy).

2.3 Audio & Voice Data

When you use our interview features, we process audio streams in real-time for speech-to-text transcription and AI evaluation. Audio data is processed ephemerally during active sessions and is not retained after the session ends unless you explicitly opt in to saving recordings for review. Transcriptions and evaluations are stored as text data associated with your account.

3. How We Use Your Information

• Service Delivery: Personalizing interview questions, generating AI evaluations, and providing coaching insights.
• Improvement: Analyzing aggregate usage patterns to improve AI model accuracy and product features.
• Communication: Sending transactional emails, product updates, and support responses.
• Security: Detecting fraud, preventing abuse, and maintaining platform integrity.
• Legal Compliance: Meeting regulatory obligations and responding to lawful requests.

4. Legal Basis for Processing (GDPR & UK GDPR)

For users in the European Economic Area (EEA) and the United Kingdom, we process personal data under the following legal bases:

• Contract Performance: Processing necessary to provide the Service you subscribed to (Article 6(1)(b) GDPR).
• Legitimate Interests: Platform security, fraud prevention, and product improvement (Article 6(1)(f) GDPR), where not overridden by your interests.
• Consent: Marketing communications and optional analytics cookies (Article 6(1)(a) GDPR). You may withdraw consent at any time.
• Legal Obligation: Compliance with applicable laws and regulations (Article 6(1)(c) GDPR).

The UK GDPR (as retained in UK domestic law) applies equivalent protections for UK users. Our EU representative can be contacted via privacy@interviewai.coach.

5. Data Sharing & Disclosure

We do not sell your personal data. We may share information with:

• Service Providers: Cloud hosting (encrypted infrastructure), AI model providers (OpenAI, Google), payment processors (Stripe/Razorpay), and email delivery services.
• Institutional Administrators: If you access the Service through an institutional account, your institution's administrators may view your interview reports and progress.
• Legal Requirements: When required by law, court order, or to protect our rights and safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified).

6. Data Retention

• Account Data: Retained while your account is active and for 30 days after deletion request.
• Interview Data: Transcriptions and evaluations retained for 12 months, then auto-archived.
• Audio Data: Processed ephemerally; not stored unless opt-in recording is enabled.
• Analytics Data: Anonymized and aggregated data may be retained indefinitely.

7. Your Rights

Depending on your jurisdiction, you have some or all of the following rights:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Deletion: Request deletion of your data ("Right to be Forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Restriction: Limit how we process your data.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent for optional processing at any time.

To exercise any of these rights, contact us at privacy@interviewai.coach. We will respond within 30 days (or the timeframe required by your local law).

7.1 EEA & UK Users (GDPR / UK GDPR)

In addition to the rights above, you may lodge a complaint with your local supervisory authority. UK users may contact the Information Commissioner's Office (ico.org.uk). You may also seek a judicial remedy.

7.2 California Users (CCPA / CPRA)

California residents have the following additional rights under the California Consumer Privacy Act:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, purposes, and third parties it is shared with.
• Right to Delete: Request deletion of personal information we hold about you, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell personal information, nor do we share it for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: You may limit use of sensitive personal information to what is necessary to provide the Service.
• Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA request, email privacy@interviewai.coach with "California Privacy Request" in the subject line.

7.3 Brazilian Users (LGPD)

Brazilian users have rights under the Lei Geral de Proteção de Dados (LGPD), including access, correction, anonymization, portability, deletion, information about sharing, and the right to withdraw consent. Requests may be submitted to privacy@interviewai.coach.

7.4 Canadian Users (PIPEDA)

Canadian users have the right to access personal information we hold about them and to challenge its accuracy. We follow the 10 fair information principles under PIPEDA. You may direct inquiries to our Privacy Officer at privacy@interviewai.coach.

7.5 Australian Users

Australian users have rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), including rights of access and correction. Complaints may be lodged with the Office of the Australian Information Commissioner (oaic.gov.au) if not resolved by us.

8. Data Security

We implement industry-standard security measures including:

• AES-256 encryption at rest for all stored data.
• TLS 1.3 encryption for all data in transit.
• Regular security audits and penetration testing.
• Role-based access controls and audit logging.
• SOC 2 Type II compliance framework (in progress).

9. International Data Transfers

Your data may be processed in jurisdictions outside your country of residence, including India, the United States, and other countries where our service providers operate. We ensure appropriate safeguards are in place:

• EU/EEA users: Transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, or we transfer to countries with an EU adequacy decision.
• UK users: Transfers are protected by the UK's International Data Transfer Agreement (IDTA) or UK Addendum to EU SCCs.
• Brazilian users: Transfers comply with LGPD Chapter V requirements, including equivalent protection standards.
• All users: We maintain data processing agreements with all sub-processors requiring them to implement equivalent data protection standards.

A list of our sub-processors and the safeguards applicable to each is available on request at privacy@interviewai.coach.

10. Children's Privacy

The Service is not directed to individuals under 16. We do not knowingly collect data from children under 16. If you become aware that a child has provided us with personal data, contact us immediately and we will delete it.

11. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice on the Service at least 30 days before the changes take effect. Continued use after the effective date constitutes acceptance.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights:

14. Supervisory Authorities & Regulatory Bodies

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant regulatory body in your jurisdiction:

• EU/EEA: Your national data protection authority (e.g., CNIL in France, BfDI in Germany). See edpb.europa.eu for a full list.
• UK: Information Commissioner's Office — ico.org.uk
• USA (California): California Privacy Protection Agency — cppa.ca.gov
• Australia: Office of the Australian Information Commissioner — oaic.gov.au
• Canada: Office of the Privacy Commissioner of Canada — priv.gc.ca
• Brazil: Autoridade Nacional de Proteção de Dados (ANPD) — gov.br/anpd
• India: Data Protection Board of India (under DPDP Act 2023)

We encourage you to contact us at privacy@interviewai.coach first so we can resolve any concern directly.